Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lis…Check if you run itEPSS 0.81%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute comm…Check if you run itEPSS 2.68%Oct 15, 2026
- High7.5Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via un…Check if you run itEPSS 0.89%Oct 15, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects…Check if you run itEPSS 0.27%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.31%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.31%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.25%Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Check if you run itEPSS 0.15%Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.25%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium6.9Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditCheck if you run itEPSS 0.48%Oct 15, 2026
- Medium6.3AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium5.8The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses.Check if you run itEPSS 0.10%Oct 15, 2026
- Medium5.3NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Check if you run itEPSS 0.44%Oct 15, 2026
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- Medium4.3Helium is a free online student planner for classes, homework, grades, and notes.Check if you run itEPSS 0.21%Oct 15, 2026
- Medium5.7Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.43%Oct 15, 2026
- High8.0OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.48%Oct 15, 2026
- High7.8In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configurationCheck if you run itEPSS 0.14%Oct 15, 2026
- Critical9.3A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724.Check if you run itEPSS 1.10%Oct 15, 2026
- High8.2kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.37%Oct 15, 2026